GHSA-H634-6R6V-4PG6 vulnerabilities

Vulnerabilities for packages: bind...

GHSA-CRH2-6H8J-H25C vulnerabilities

Vulnerabilities for packages: bind...

GHSA-WX7P-V693-68JH vulnerabilities

Vulnerabilities for packages: bind...

CVE-2026-19666 vulnerabilities

Vulnerabilities for packages: bind...

CVE-2026-19667 vulnerabilities

Vulnerabilities for packages: bind...

CVE-2026-80274 vulnerabilities

Vulnerabilities for packages: bind...

CVE-2026-19668 vulnerabilities

Vulnerabilities for packages: bind...

CVE-2026-76163 vulnerabilities

Vulnerabilities for packages: bind...

CVE-2026-77692 vulnerabilities

Vulnerabilities for packages: bind...

CVE-2026-78301 vulnerabilities

Vulnerabilities for packages: bind...

GHSA-38FX-CM5X-27PG vulnerabilities

Vulnerabilities for packages: bind...

GHSA-P6FX-3C9F-WCC9 vulnerabilities

Vulnerabilities for packages: bind...

GHSA-PQFM-7X4V-9W63 vulnerabilities

Vulnerabilities for packages: bind...

GHSA-QRRF-RHQ5-MVXV vulnerabilities

Vulnerabilities for packages: bind...

CVE-2026-19033 vulnerabilities

Vulnerabilities for packages: bind...

CVE-2026-102276

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and use...

CVE-2026-102265

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS.load in jwt/apijws.py is affected because parser catches ValueError but not RecursionError. This occurs when a deeply nested token header reaches json.loads. As a result, RecursionError escapes the...

CVE-2026-102275

PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.fromjwk in jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding ...

CVE-2026-102274

PyJWT is a Python implementation of JSON Web Token standards. From 2.9.0 until 2.14.0, PyJWKSet does not catch the plain ValueError raised for malformed RSA JWK components by RSAAlgorithm.fromjwk in jwt/apijwk.py. This occurs when a JWK Set contains a malformed RSA key alongside otherwise usable...

CVE-2026-102273

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWT HMACAlgorithm.preparekey is affected because HMAC key guard only recognizes top-level public JWK forms and misses container representations. This occurs when an application allows HMAC and asymmetric...